Privacy Policy

Camrilo(“we”, “us”) operates this website. For any question about this policy or your data, use the contact page.

Depending on how you use the site, we collect:

• Account details — email address and password (handled by our authentication provider), and anything you add to your profile.
• Order details — name, delivery/billing address, phone number, and the items you buy. We never see or store your full card details — payment is handled entirely by our payment provider.
• Contact form submissions — name, email, and your message.
• Reviews — your name, rating, review text, and any photos you choose to attach.
• Newsletter — your email address, if you opt in.
• Cart, wishlist and recently-viewed items — stored in your browser, and synced to your account if you're signed in.
• Analytics — anonymised usage data, only if you accept the cookie banner. See “Cookies” below.

• To process and deliver your orders, and contact you about them (order confirmation, shipping, delivery issues).
• To respond to messages you send us.
• To send you marketing emails, only if you've opted in — you can unsubscribe at any time via the link in every email.
• To send order/shipping updates by text message, only if you've opted in to SMS notifications.
• To understand how the site is used and improve it, using anonymised analytics you've consented to.
• To detect and prevent fraud or abuse.

We use a small number of third-party services to run the site. Each only receives the data it needs to do its job:

• Payment processing — your payment details go directly to our certified payment provider; we never store card numbers.
• Hosting & database — your account and order data is stored with our hosting/database provider.
• Transactional email — order confirmations and account emails are sent via our email delivery provider.
• SMS notifications — if enabled and you've opted in, shipping updates are sent via our SMS provider.
• Analytics — if you accept the cookie banner, anonymised usage data is shared with Google Analytics.

We do not sell your personal data to anyone.

We use two kinds of storage:

• Essential — keeps you signed in, remembers your cart, and keeps checkout working. These can't be switched off, as the site won't function without them, but they don't track you across other sites.
• Analytics — Google Analytics, only loaded if you accept the cookie banner. You can decline it, or change your mind later by clearing your browser's local storage for this site and reloading the page.

Order records are kept for as long as required for accounting and tax purposes. Account data is kept until you ask us to delete it. Contact form messages and abandoned cart data are kept only as long as needed to act on them.

Under UK GDPR, you can ask us to:

• Give you a copy of the personal data we hold about you.
• Correct inaccurate data.
• Delete your data (subject to what we're legally required to keep, e.g. order records for tax purposes).
• Stop or restrict certain uses of your data.

To exercise any of these, use the contact page. You can also complain to the UK Information Commissioner's Office (ico.org.uk) if you think we've mishandled your data.

If we make material changes to how we handle your data, we'll update this page and, where appropriate, let you know.